Data Breach Public Notification Register

The Environment Protection Authority (EPA) maintains this register in accordance with section 59P(2) of the Privacy and Personal Information Protection Act 1998 (PPIP Act).

This register contains details of public notifications issued by the EPA in relation to eligible data breaches involving personal information.

Notifications remain available on this register for at least 12 months from the date of publication.

Data breach policy

The EPA's Data Breach Policy outlines our approach to complying with the Mandatory Notification of Data Breach Scheme, including role and responsibilities for:

  • containing, assessing and managing data breaches 
  • notifying and reporting on 'eligible data breaches'.

Public notification register

Public notification title Publication date Summary of the data breach 
POEO register data breach in February13 May 2026

On 28 June 2025, unauthorised access occurred through the EPA's POEO Public Register, affecting certain documents associated with Dangerous Goods, Radiation and Pesticides licences.

The information potentially affected included names, postal addresses and email addresses. The EPA secured the system, notified relevant authorities, and took steps to notify and support potentially affected individuals.

Get help or make a complaint

ID Support

ID Support NSW offers assistance for individuals dealing with data breaches and information compromise.

To contact ID Support NSW:

  • visit ID Support NSW 
  • phone 1800 001 040, Monday to Friday 9 am to 5 pm, excluding public holidays. Interpreter services are available.

NSW Environment Protection Authority

To contact us:

Submit a privacy complaint

If you were impacted by a breach, you can submit a privacy complaint to the EPA regarding this incident to [email protected]